Do you want the application "Daemon" to accept incoming network connections?
I am aware that this happens when the firewall is activated.
I am aware that the application in question can be found in the list of applications in Security & Privacy > Firewall > Firewall Options... after it has been Allowed or Denied in that pop-up alert.
I am also aware that once it's been added (in Allowed or Denied state) to the Firewall's list we can hover the cursor over the application in question and get its path to know where it's installed...
I am also aware that we can open Terminal.app and run various commands to learn more about what this thing is if we are not sure...
codesign -dv --verbose=4 <path to application>
pkgutil --pkgs | grep "name here"
<path to application> --help
What I can't comprehend is why Apple is not providing more information in the initial pop-up alert. Inform users before they make a random security decision. This just creates bad habits.
Allowing an application to bypass the firewall can be a security threat, and without the proper information users may make the wrong choice based on the idea that if they choose "Deny" "it will stop their computer from working properly". Bad
Proper information
- Location of application - it's path
- Is this part of an installed application package - is there a BOM - check it?
- Date it was installed and by which account?
- Is it signed?
- Has it been checked in a database (VirusTotal) for malicious code?
- ...
Think of those questions when you look at what Apple gives a user while simultaneously asking to Deny or Allow
This is the Help.app information given... which is no more elucidating.
This is the pop-up path information inside Security & Privacy > Firewall > Firewall options... after the Application has been Allowed... Why not add this to the initial Firewall Alert with more information.
Apple can keep its "keep it simple" Alert while adding a button or caret to show more information about this application. Maybe a circle with an i inside it